IBM Robotic Process Automation with Automation Anywhere Trust Management Issue Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a suite of process automation solutions from IBM USA. IBM Robotic Process Automation with Automation Anywhere has a trust management issue vulnerability that can be exploited by an attacker to brute-force break account credentials...

CVE-2019-10981: Insufficiently Protected Credentials

In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials...

PT-2019-2665

Name of the Vulnerable Software and Affected Versions Vijeo Citect versions 7.30 through 7.40 CitectSCADA versions 7.30 through 7.40 PowerSCADA Expert affected versions not specified Description The issue is related to insufficient protection of registration data, which may allow an attacker to...

CVE-2019-12289

An issue was discovered in upgradefirmware.cgi on VStarcam 100T C7824WIP CH-sys-48.53.75.119123 and 200V C38S CH-sys-48.53.203.119123 devices. A remote command can be executed through a system firmware update without authentication. The attacker can modify the files within the internal firmware o...

PT-2019-2636 · Jenkins · Jenkins Credentials Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Credentials Plugin versions 2.1.18 and earlier Description: The issue allows users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path and obtain the...

Cisco Expressway Series Directory Traversal Vulnerability

A vulnerability in the management web interface of Cisco Expressway Series could allow an authenticated, remote attacker to perform a directory traversal attack against an affected device. The vulnerability is due to insufficient input validation on the web interface. An attacker could exploit th...

PT-2019-7128

Name of the Vulnerable Software and Affected Versions Baxter SIGMA Spectrum Infusion System version 6.05 Description The issue allows remote access via Port 22/SSH without authentication, enabling a remote attacker to make unauthorized configuration changes to the wireless battery module WBM and...

CVE-2019-3779

Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA Certificate Authority to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the...

CVE-2018-1000410

CVE-2018-1000410 is an information-disclosure vulnerability affecting Jenkins 2.145 and earlier, and LTS 2.138.1 and earlier, tied to the Stapler framework. The issue resides in core/src/main/java/org/kohsuke/stapler/RequestImpl.java and core/src/main/java/hudson/model/Descriptor.java, enabling a...

Unspecified Vulnerability in Technicolor TC7110.AR

Technicolor TC7110.AR is a cable modem from the French Technicolor group. A security vulnerability exists in Technicolor TC7110.AR STD version 3.38.03. A remote attacker could exploit the vulnerability to obtain Wi-Fi credentials by sending an SNMP request...

CVE-2018-18810

The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases...

CVE-2018-18810: Undefined Security Weakness

The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases...

PT-2018-14669

Name of the Vulnerable Software and Affected Versions TIBCO Managed File Transfer Command Center versions up to and including 8.1.0 TIBCO Managed File Transfer Internet Server versions up to and including 8.1.0 Description The issue allows an authenticated user with specific privileges to gain...

CVE-2018-17933

VGo Robot Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client...

Comparison of Open Source Adversary Emulation Tools

PenTestIT RSS Feed If you liked my older post titled "List of Adversary Emulation Tools", I am sure you must want to know what is the difference or comparison between the different tools. This post is an attempt to do just that -to list down the comparison of open source adversary emulation tools...

Nextcloud Server Authorization Issues Vulnerability

Nextcloud is a client-server software suite for creating network hard disks. An authorization issue vulnerability exists in versions of Nextcloud Server prior to 12.0.3, which can be exploited by an attacker to obtain user credentials and bypass two-factor authentication...

CSRF vulnerability and missing permission checks in GitHub Pull Request Builder Plugin allowed server-side request forgery, capturing credentials

GitHub Pull Request Builder Plugin did not perform permission checks on methods implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing...

CVE-2018-11195

Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to the browser "back and refresh" attack. This allows malicious users with physical access to the web browser of a Mahara user, after they have logged in, to potentially gain access to their Mahara...

CVE-2018-11195

Mahara is affected in versions 17.04 before 17.04.8; 17.10 before 17.10.5; and 18.04 before 18.04.1. The vulnerability is described as a browser “back and refresh” attack that, after a user has logged in, could allow a malicious user with physical access to the user’s browser to potentially obtai...

CVE-2017-9317

Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device...